a
/
code-server
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

chore(deps): fix issues identified by audit-ci (#4438) 

* fix(deps): ansi-regex issue

* fix(deps): upgrade tar to safe version

* chore(deps): fix vm2 issue

* fix(ci): increase timeout for audit-ci to 15
This commit is contained in:
Joe Previte 2021-11-03 14:09:31 -07:00 committed by GitHub
parent 13e91dedc1
commit 13404df267
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 5 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
.github/workflows/ci.yaml vendored
View File

@ -60,7 +60,7 @@ jobs:
name: Run audit-ci name: Run audit-ci
needs: prebuild needs: prebuild
runs-on: ubuntu-latest runs-on: ubuntu-latest
timeout-minutes: 5 timeout-minutes: 15
steps: steps:
- name: Checkout repo - name: Checkout repo
uses: actions/checkout@v2 uses: actions/checkout@v2

5
package.json
View File

@ -75,8 +75,9 @@
"browserslist": "^4.16.5", "browserslist": "^4.16.5",
"safe-buffer": "^5.1.1", "safe-buffer": "^5.1.1",
"vfile-message": "^2.0.2", "vfile-message": "^2.0.2",
"argon2/@mapbox/node-pre-gyp/tar": "^6.1.9", "tar": "^6.1.9",
"path-parse": "^1.0.7" "path-parse": "^1.0.7",
"vm2": "^3.9.4"
}, },
"dependencies": { "dependencies": {
"@coder/logger": "1.1.16", "@coder/logger": "1.1.16",

2
yarn.lock
View File

@ -4534,7 +4534,7 @@ vfile@^4.0.0:
unist-util-stringify-position "^2.0.0" unist-util-stringify-position "^2.0.0"
vfile-message "^2.0.0" vfile-message "^2.0.0"
vm2@^3.9.3: vm2@^3.9.3, vm2@^3.9.4:
version "3.9.5" version "3.9.5"
resolved "https://registry.yarnpkg.com/vm2/-/vm2-3.9.5.tgz#5288044860b4bbace443101fcd3bddb2a0aa2496" resolved "https://registry.yarnpkg.com/vm2/-/vm2-3.9.5.tgz#5288044860b4bbace443101fcd3bddb2a0aa2496"
integrity sha512-LuCAHZN75H9tdrAiLFf030oW7nJV5xwNMuk1ymOZwopmuK3d2H4L1Kv4+GFHgarKiLfXXLFU+7LDABHnwOkWng== integrity sha512-LuCAHZN75H9tdrAiLFf030oW7nJV5xwNMuk1ymOZwopmuK3d2H4L1Kv4+GFHgarKiLfXXLFU+7LDABHnwOkWng==